Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/323830343a326463383a3a2f33322d3438203d3e20323635333033.roa
File:                     323830343a326463383a3a2f33322d3438203d3e20323635333033.roa (raw, json)
Hash identifier:          xJrPbKr2UdrMIvDRcIvuoSwft4HWLgrbRZI5tAnyvpg=
Subject key identifier:   1F:4E:53:BF:EE:24:4E:AE:66:86:74:FA:49:8D:C2:56:56:DB:92:E2
Certificate issuer:       /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial:       798F6481AF82075BA15CFE7B924E28E281E20D27
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/323830343a326463383a3a2f33322d3438203d3e20323635333033.roa
Signing time:             Mon 08 Apr 2024 14:00:11 +0000
ROA not before:           Mon 08 Apr 2024 13:55:11 +0000
ROA not after:            Mon 07 Apr 2025 14:00:11 +0000
asID:                     265303
IP address blocks:        2804:2dc8::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:8f:64:81:af:82:07:5b:a1:5c:fe:7b:92:4e:28:e2:81:e2:0d:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
        Validity
            Not Before: Apr  8 13:55:11 2024 GMT
            Not After : Apr  7 14:00:11 2025 GMT
        Subject: CN=1F4E53BFEE244EAE668674FA498DC25656DB92E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a1:90:1d:c8:93:75:68:06:52:73:96:fc:01:
                    34:7c:50:14:0c:bd:a8:10:23:70:d2:21:c5:16:5f:
                    89:14:ea:a3:7c:cd:80:60:96:67:36:56:03:aa:63:
                    4d:15:57:66:91:2a:4e:ae:15:91:7d:d9:27:1d:cc:
                    0e:33:7e:f1:77:a0:7c:61:84:4f:c1:56:da:0b:62:
                    15:c9:cb:ff:ad:7b:ab:5b:c5:4b:5a:da:61:18:af:
                    a5:8a:aa:e7:c8:c3:2e:03:96:ed:1f:d3:20:c3:0f:
                    e3:fa:1b:8b:69:c0:51:de:84:9d:02:98:9f:df:29:
                    ce:61:04:e8:ca:38:ae:1e:52:67:9e:77:38:6e:e9:
                    e4:70:c6:cc:2c:7f:40:77:a4:17:16:0b:9d:6f:9a:
                    c3:d4:cd:72:b7:07:53:eb:6c:1e:5f:b7:c5:f7:cc:
                    27:cb:27:8c:b1:6b:0b:4c:ee:d4:b9:a3:87:14:df:
                    e0:20:0c:4d:e8:11:41:6e:20:17:93:28:0a:d0:68:
                    10:68:ea:0d:0e:89:9e:9b:1d:67:11:fa:66:99:7f:
                    a6:31:1e:2a:13:c7:76:d7:1a:17:98:f8:7f:16:00:
                    49:e5:5b:7c:93:64:c8:96:f6:cc:b0:c0:41:b3:cf:
                    14:26:89:59:da:17:c5:3f:94:cc:3a:c6:27:84:a3:
                    92:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:4E:53:BF:EE:24:4E:AE:66:86:74:FA:49:8D:C2:56:56:DB:92:E2
            X509v3 Authority Key Identifier:
                keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/323830343a326463383a3a2f33322d3438203d3e20323635333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2dc8::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:0e:72:1d:d5:ed:0b:8b:d8:f6:5e:59:ac:8c:95:0e:e0:e0:
         e5:da:38:3d:0d:7c:52:2d:aa:ee:39:8f:73:db:13:2f:46:13:
         c6:fd:c6:7c:ce:a5:7d:f6:0e:96:3e:fb:e1:8a:c7:e6:68:64:
         09:21:5b:f3:c9:fa:1d:83:45:9b:e1:82:58:e0:d6:71:b9:0c:
         e1:46:ab:09:96:fd:57:5a:30:21:ea:95:4e:d6:e1:77:bb:aa:
         7d:a1:20:66:20:24:9b:96:ee:51:6d:a3:33:e7:69:e0:bf:53:
         f8:cd:43:41:53:56:8f:c4:1c:8e:ac:bb:a5:44:33:44:6d:ac:
         28:be:60:2d:dc:69:aa:0c:0e:76:9a:4a:2e:57:a0:e6:f8:3b:
         e5:c4:c1:3f:d0:bc:62:fb:70:3a:25:49:2e:cd:06:c7:68:2e:
         94:96:71:bb:56:b1:e0:9f:59:98:31:b1:bd:5e:64:54:58:55:
         6e:dd:56:ec:4f:e3:3c:f6:c8:69:40:65:5a:55:fc:8c:95:44:
         5a:01:2d:01:da:2d:15:0d:a3:a4:9b:60:27:c6:79:f9:f6:5c:
         12:05:f8:ae:38:18:b7:3a:43:da:9b:b7:87:4a:41:d0:d9:6d:
         0e:2a:bf:25:26:b8:e5:e2:2d:07:57:ea:da:6d:c0:a2:21:7b:
         39:b2:e3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org